Public exploitation

Exploit catalog

Every public exploit we catalog, in one index. Search by CVE, exploit name or technology — and see, right beside it, what the flaw is actually worth: severity, exploitation probability, and whether it’s already under attack.

86,991cataloged exploits
40,452CVEs with public exploitation
24,696lab-tested
AllReferência 26,240Exploit-DB 24,488GitHub PoC 18,044VulnCheck XDB 10,121Nuclei 4,561Metasploit 3,537✓ verified onlyrecentpopularrisk
26,150 exploits
Referência
CVE-2016-1464
CVE-2016-1464—
Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to execute arbitrary code
23RISK
open ↗
Referência
CVE-2010-4837
CVE-2010-4837—
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack
23RISK
open ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RISK
open ↗
Referência
CVE-2026-82193
CVE-2026-82193MEDIUM
WPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path Traversal
33RISK
open ↗
Referência
CVE-2017-14961
CVE-2017-14961—
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating
23RISK
open ↗
Referência
CVE-2015-6009
CVE-2015-6009—
Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to e
23RISK
open ↗
Referência
CVE-2022-46637
CVE-2022-46637CRITICAL
Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.
48RISK
open ↗
Referência
CVE-2009-3153
CVE-2009-3153—
Multiple cross-site scripting (XSS) vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbi
23RISK
open ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RISK
open ↗
Referência
CVE-2017-14961
CVE-2017-14961—
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating
23RISK
open ↗
Referência
CVE-2026-80114
CVE-2026-80114HIGH
PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.sys
41RISK
open ↗
Referência✓ VexDay Proof
Gravy Media Photo Host 1.0.8 - Local File Disclosure
CVE-2009-2184—webappsphp
Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to re
23RISK
open ↗
Referência
CVE-2009-4366
CVE-2009-4366—
Cross-site scripting (XSS) vulnerability in index.php in ScriptsEz Ez Blog 1.0 allows remote attackers to inject arbitra
23RISK
open ↗
Referência
CVE-2009-2551
CVE-2009-2551—
Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject
23RISK
open ↗
Referência
CVE-2009-4678
CVE-2009-4678—
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary
23RISK
open ↗
Referência
CVE-2009-4678
CVE-2009-4678—
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary
23RISK
open ↗
Referência
CVE-2010-0936
CVE-2010-0936—
Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allow
23RISK
open ↗
Referência
CVE-2010-1945
CVE-2010-1945—
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, all
23RISK
open ↗
Referência
CVE-2010-2122
CVE-2010-2122—
Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r
43RISK
open ↗
Referência
CVE-2010-3457
CVE-2010-3457—
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arb
23RISK
open ↗
Referência
CVE-2010-3457
CVE-2010-3457—
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arb
23RISK
open ↗
Referência
CVE-2010-4837
CVE-2010-4837—
Cross-site scripting (XSS) vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote attack
23RISK
open ↗
Referência
CVE-2015-7547
CVE-2015-7547—
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RISK
open ↗
Referência
CVE-2010-2122
CVE-2010-2122—
Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows r
43RISK
open ↗
Referência
CVE-2026-13547
CVE-2026-13547MEDIUM
Hanwang e-Face General Management Platform upload.do unrestricted upload
33RISK
open ↗
Referência
CVE-2021-31761
CVE-2021-31761—
Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's ru
35RISK
open ↗
Referência
CVE-2026-13516
CVE-2026-13516HIGH
Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow
41RISK
open ↗
Referência
CVE-2026-13503
CVE-2026-13503MEDIUM
antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal
33RISK
open ↗
Referência
CVE-2012-10036
CVE-2012-10036CRITICAL
Project Pier <= 0.8.8 Arbitrary File Upload RCE
63RISK
open ↗
Referência
CVE-2012-10036
CVE-2012-10036CRITICAL
Project Pier <= 0.8.8 Arbitrary File Upload RCE
63RISK
open ↗
← previouspage 290 / 872next →

We index only the public link to the proof of concept — we never host or redistribute exploitation code. Sources: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit and VulnCheck XDB. A public PoC existing does not mean the flaw is exploitable in your environment.